Tech Support Forum - View Single Post - TASKMGRU.EXE, MSIMN32.EXE, BHOASS.DLL...and MORE

meggsgj · 04-22-2005, 07:35 AM

I had a new virus yesterday evening and after searching (on different machine!) it seemed to be very similar to that posted as http://www.techsupportforum.com/sho...?threadid=49162, but before posting I followed the steps in your spyware tutorial.

When I ran Trend micro online I found
'HouseCall has found 6 infected files'
TROJ LOADER.E C:\WINDOWS\SYSTEM32\MSIMN32.EXE
TROJ LOADER.E C:\WINDOWS\SYSTEM32\TASKMGRU.EXE
TROJ STARTPAG.NZ C:\WINDOWS\BHOASS.DLL
TROJ STARTPAG.NZ C:\WINDOWS\BHOASSW.DLL
TROJ LOADER.E C:\WINDOWS\EXPLORER32DBG.EXE
TROJ LOADER.E C:\WINDOWS\IEXPLORE_DBG.EXE

All 'Non Cleanable'...so I chose to delete, but top two could not be cleaned because they were in use. I closed Internet explorer, but then could not open it again - message said that file c:\program files\internet explorer\iexplore.exe did not exist. I checked and it did exist, but gave me same message when I clicked on it directly.

I renamed iexplore.exe to foo.exe and ran - this brought up Internet Explorer but it said it was running in 'compatibility mode'. So IE works, but not fully.

I then ran Trend micro again and got just the following 2
TROJ LOADER.E C:\WINDOWS\SYSTEM32\MSIMN32.EXE
TROJ LOADER.E C:\WINDOWS\SYSTEM32\TASKMGRU.EXE

again they could be deleted so I moved on with recommended tasks and all was well until I ran Kill2Me. This ran successfully, but said that taskbar and desktop would disappear temporarily - They went alright, but haven't come back yet! I have tried booting in normal and safe mode, but to no avail.

I can get to some programs (using CTRL+ALT+DEL and taskmanager), but things are very difficult and i don't know if I have fixed the original problem.

Can someone help please!!!

04-22-2005, 07:35 AM	#1 (permalink)
meggsgj Registered User Join Date: Apr 2005 Posts: 2 OS: XP	TASKMGRU.EXE, MSIMN32.EXE, BHOASS.DLL...and MORE I had a new virus yesterday evening and after searching (on different machine!) it seemed to be very similar to that posted as http://www.techsupportforum.com/sho...?threadid=49162, but before posting I followed the steps in your spyware tutorial. When I ran Trend micro online I found 'HouseCall has found 6 infected files' TROJ LOADER.E C:\WINDOWS\SYSTEM32\MSIMN32.EXE TROJ LOADER.E C:\WINDOWS\SYSTEM32\TASKMGRU.EXE TROJ STARTPAG.NZ C:\WINDOWS\BHOASS.DLL TROJ STARTPAG.NZ C:\WINDOWS\BHOASSW.DLL TROJ LOADER.E C:\WINDOWS\EXPLORER32DBG.EXE TROJ LOADER.E C:\WINDOWS\IEXPLORE_DBG.EXE All 'Non Cleanable'...so I chose to delete, but top two could not be cleaned because they were in use. I closed Internet explorer, but then could not open it again - message said that file c:\program files\internet explorer\iexplore.exe did not exist. I checked and it did exist, but gave me same message when I clicked on it directly. I renamed iexplore.exe to foo.exe and ran - this brought up Internet Explorer but it said it was running in 'compatibility mode'. So IE works, but not fully. I then ran Trend micro again and got just the following 2 TROJ LOADER.E C:\WINDOWS\SYSTEM32\MSIMN32.EXE TROJ LOADER.E C:\WINDOWS\SYSTEM32\TASKMGRU.EXE again they could be deleted so I moved on with recommended tasks and all was well until I ran Kill2Me. This ran successfully, but said that taskbar and desktop would disappear temporarily - They went alright, but haven't come back yet! I have tried booting in normal and safe mode, but to no avail. I can get to some programs (using CTRL+ALT+DEL and taskmanager), but things are very difficult and i don't know if I have fixed the original problem. Can someone help please!!!